This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft
File:                     LS4sVp1LY5ln5litXEl8MxqriF8.mft (raw, json)
Hash identifier:          AZQFmxKQpRGjiWkEsLskB5UjEWgpImZJNz9XxpUmcNw=
Subject key identifier:   C0:79:8C:EE:17:D5:30:A5:94:0C:20:37:73:99:49:D3:EC:31:58:12
Authority key identifier: 2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F
Certificate issuer:       /CN=A9123431/serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft
Manifest number:          01EF
Signing time:             Wed 01 Oct 2025 03:07:04 +0000
Manifest this update:     Wed 01 Oct 2025 03:07:04 +0000
Manifest next update:     Wed 08 Oct 2025 03:07:04 +0000
Files and hashes:         1: LS4sVp1LY5ln5litXEl8MxqriF8.crl (hash: So+DLIoGxlg+PlTqDJSPBpN+B8YLdlhULcxPKeB1ntg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123431, serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F
        Validity
            Not Before: Oct  1 03:07:04 2025 GMT
            Not After : Oct  8 03:07:04 2025 GMT
        Subject: CN=68dc9ad8-0299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:21:48:c7:e3:e5:1d:51:ca:5a:e8:a8:1f:3d:
                    17:76:5c:d8:87:57:a4:71:d0:c2:d3:e6:af:9d:68:
                    d0:42:ea:0b:0f:84:b2:9c:a8:58:a5:21:c5:73:9c:
                    8e:cf:1a:16:06:76:8d:8e:84:61:41:df:8a:44:90:
                    e7:a5:4e:5c:f7:3a:36:16:7b:f7:fb:c2:f3:0c:66:
                    d5:a9:5c:55:2b:ff:57:f2:27:5d:a9:ea:28:57:e6:
                    1b:05:29:f5:51:5f:81:c7:41:0e:94:59:09:d7:07:
                    a5:60:89:c5:58:fd:c1:24:eb:f3:3c:3f:9d:49:67:
                    fa:a9:17:23:80:14:cf:9f:09:2a:5a:c5:47:a4:fa:
                    de:84:54:73:48:02:36:4a:3d:b1:d8:03:c8:a8:5e:
                    e2:82:48:ca:55:eb:81:3f:15:4f:f1:2e:79:b8:59:
                    9b:79:a6:80:2f:38:d4:23:2d:63:ff:96:70:69:36:
                    8e:a2:d0:27:ba:f3:58:17:dc:15:1e:93:38:de:35:
                    70:14:b5:a7:65:18:4e:0d:b1:21:7e:c8:d0:bf:88:
                    57:68:2c:89:d0:b9:76:81:63:79:d6:c1:c4:58:1e:
                    83:e1:39:6e:f1:fa:42:14:fb:80:bd:03:a3:ca:52:
                    3b:db:c8:7a:12:2b:de:fd:9b:29:91:26:e3:f0:55:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:79:8C:EE:17:D5:30:A5:94:0C:20:37:73:99:49:D3:EC:31:58:12
            X509v3 Authority Key Identifier:
                keyid:2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1c:17:6e:53:ae:ac:4f:28:f3:a3:55:6c:3a:ff:89:ec:60:
         34:cf:83:47:90:e9:c2:4d:98:6a:99:f1:f1:cc:d8:11:9a:13:
         5f:66:62:43:ea:57:f9:b4:fb:42:c0:b8:ea:64:dc:16:93:7c:
         99:0f:8c:5b:ed:32:30:cd:66:ab:3d:82:1c:46:9d:7b:b0:44:
         45:80:c1:47:75:b2:3d:88:0f:80:b6:11:d6:10:a1:09:99:b2:
         98:95:9b:43:2c:0a:a4:66:42:27:54:3f:aa:52:72:fc:4c:4a:
         d3:93:fc:48:c7:f3:ec:22:53:ef:89:c3:7c:43:65:70:9e:2d:
         43:df:fa:fc:b3:1f:ee:98:35:ae:3d:7f:f9:24:e9:e7:4b:00:
         ef:2e:aa:8d:96:f5:9e:1d:54:6d:d7:fe:c6:49:cf:e5:99:67:
         70:c8:12:77:fc:74:45:f2:32:10:2a:e9:d5:1d:ea:66:c4:bf:
         8c:28:23:e6:65:16:7e:61:76:0d:11:aa:90:c1:02:cb:d1:c0:
         55:d4:69:f9:ea:8d:e8:60:fe:39:94:e5:3f:36:a8:10:0d:0b:
         30:a9:e8:cf:cb:fa:c2:21:9e:24:6b:e6:3a:d5:24:79:e4:da:
         40:06:64:84:04:a7:3d:92:b6:2b:13:14:05:84:7f:f4:96:1f:
         8b:e7:5d:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM0MzExMTAvBgNVBAUTKDJEMkUyQzU2OUQ0QjYzOTk2N0U2NThBRDVDNDk3QzMz
MUFBQjg4NUYwHhcNMjUxMDAxMDMwNzA0WhcNMjUxMDA4MDMwNzA0WjAYMRYwFAYD
VQQDEw02OGRjOWFkOC0wMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCFIx+PlHVHKWuioHz0XdlzYh1ekcdDC0+avnWjQQuoLD4SynKhYpSHFc5yO
zxoWBnaNjoRhQd+KRJDnpU5c9zo2Fnv3+8LzDGbVqVxVK/9X8iddqeooV+YbBSn1
UV+Bx0EOlFkJ1welYInFWP3BJOvzPD+dSWf6qRcjgBTPnwkqWsVHpPrehFRzSAI2
Sj2x2APIqF7igkjKVeuBPxVP8S55uFmbeaaALzjUIy1j/5ZwaTaOotAnuvNYF9wV
HpM43jVwFLWnZRhODbEhfsjQv4hXaCyJ0Ll2gWN51sHEWB6D4Tlu8fpCFPuAvQOj
ylI728h6Eive/ZspkSbj8FWc5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB5jO4X
1TCllAwgN3OZSdPsMVgSMB8GA1UdIwQYMBaAFC0uLFadS2OZZ+ZYrVxJfDMaq4hf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQzMS9DMTdCN0M2NEFD
QzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1bG41bGl0WEVsOE14cXJp
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xTNHNWcDFMWTVsbjVsaXRYRWw4TXhxcmlGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzQzMS9DMTdCN0M2NEFDQzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1
bG41bGl0WEVsOE14cXJpRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABHBduU66sTyjzo1VsOv+J7GA0z4NHkOnCTZhqmfHxzNgRmhNfZmJD
6lf5tPtCwLjqZNwWk3yZD4xb7TIwzWarPYIcRp17sERFgMFHdbI9iA+AthHWEKEJ
mbKYlZtDLAqkZkInVD+qUnL8TErTk/xIx/PsIlPvicN8Q2Vwni1D3/r8sx/umDWu
PX/5JOnnSwDvLqqNlvWeHVRt1/7GSc/lmWdwyBJ3/HRF8jIQKunVHepmxL+MKCPm
ZRZ+YXYNEaqQwQLL0cBV1Gn56o3oYP45lOU/NqgQDQswqejPy/rCIZ4ka+Y61SR5
5NpABmSEBKc9krYrExQFhH/0lh+L511s
-----END CERTIFICATE-----